CVE-2019-11982

8.3HIGH

Key Information:

Vendor
HP
Status
HPe Ilo4 And HPe Ilo5
Vendor
CVE Published:
5 June 2019

Summary

A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 (iLO 5) for Gen10 Servers earlier than version v1.39.

Affected Version(s)

HPE iLO4 and HPE iLO5 iLO4 prior to v2.61b and iLO5 prior to v1.39

References

https://support.hpe.com/hpsc/doc/public/display?docLocale...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.